INFO: task syz-executor.5:13033 blocked for more than 145 seconds.
      Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:27712 pid:13033 ppid:5093   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5304 [inline]
 __schedule+0xcce/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
 __down_read_common+0x7df/0xf30 kernel/locking/rwsem.c:1250
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 do_user_addr_fault+0xa51/0x1230 arch/x86/mm/fault.c:1358
 handle_page_fault arch/x86/mm/fault.c:1498 [inline]
 exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1554
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0033:0x7f799b2276f6
RSP: 002b:00007fff5bbd56a8 EFLAGS: 00010287
RAX: 0000001b31338000 RBX: 00007f799b3ac018 RCX: 0000001b31320000
RDX: 0000001b31338004 RSI: 0000001b313371b0 RDI: 000000005f8f9748
RBP: 000000005f8f9748 R08: 0000001b31920000 R09: 000000005f8f974c
R10: 00007fff5bbef090 R11: 0000000000026bce R12: 00007f799b3a0000
R13: 0000000000000001 R14: 0000000000000c8f R15: ffffffff81aee2ae
 </TASK>
INFO: task syz-executor.5:13035 blocked for more than 146 seconds.
      Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:26288 pid:13035 ppid:5093   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5304 [inline]
 __schedule+0xcce/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 io_schedule+0xbe/0x130 kernel/sched/core.c:8884
 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1301
 folio_lock include/linux/pagemap.h:952 [inline]
 write_cache_pages+0x5e5/0xe70 mm/page-writeback.c:2440
 mpage_writepages+0xc6/0x170 fs/mpage.c:653
 udf_writepages+0x86/0xe0 fs/udf/inode.c:211
 do_writepages+0x1a8/0x640 mm/page-writeback.c:2551
 filemap_fdatawrite_wbc mm/filemap.c:390 [inline]
 filemap_fdatawrite_wbc+0x147/0x1b0 mm/filemap.c:380
 __filemap_fdatawrite_range+0xb8/0xf0 mm/filemap.c:423
 file_write_and_wait_range+0xce/0x140 mm/filemap.c:781
 __generic_file_fsync+0x78/0x1f0 fs/libfs.c:1132
 generic_file_fsync+0x77/0x120 fs/libfs.c:1173
 vfs_fsync_range+0x13e/0x230 fs/sync.c:188
 generic_write_sync include/linux/fs.h:2452 [inline]
 udf_file_write_iter+0x363/0x740 fs/udf/file.c:126
 call_write_iter include/linux/fs.h:1851 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x9ed/0xe10 fs/read_write.c:584
 ksys_write+0x12b/0x250 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f799b28c0f9
RSP: 002b:00007f799bfdc168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f799b3abf80 RCX: 00007f799b28c0f9
RDX: 000000000208e24b RSI: 0000000020000080 RDI: 0000000000000004
RBP: 00007f799b2e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff5bbd56df R14: 00007f799bfdc300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.5:13047 blocked for more than 147 seconds.
      Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:26728 pid:13047 ppid:5093   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5304 [inline]
 __schedule+0xcce/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
 rwsem_down_read_slowpath kernel/locking/rwsem.c:1086 [inline]
 __down_read_common+0x7df/0xf30 kernel/locking/rwsem.c:1250
 mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 do_user_addr_fault+0xa51/0x1230 arch/x86/mm/fault.c:1358
 handle_page_fault arch/x86/mm/fault.c:1498 [inline]
 exc_page_fault+0x98/0x170 arch/x86/mm/fault.c:1554
 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:570
RIP: 0010:fault_in_readable+0x179/0x290 mm/gup.c:1863
Code: 72 c5 ff 49 39 dd 0f 84 06 01 00 00 45 31 f6 eb 11 e8 9b 72 c5 ff 48 81 c3 00 10 00 00 4c 39 eb 74 1d e8 8a 72 c5 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 c7 6e c5 ff 45 85 ff 74 d2 e8
RSP: 0018:ffffc90004b7fb08 EFLAGS: 00050206
RAX: 00000000000245b0 RBX: 000000002003d000 RCX: ffffc90006259000
RDX: 0000000000040000 RSI: ffffffff81beb076 RDI: 0000000000000005
RBP: 000000002003c2c0 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
R13: 000000002003e000 R14: 0000000000000000 R15: 0000000000000000
 fault_in_iov_iter_readable+0x252/0x2c0 lib/iov_iter.c:350
 generic_perform_write+0x1ae/0x570 mm/filemap.c:3916
 __generic_file_write_iter+0x2ae/0x500 mm/filemap.c:4054
 udf_file_write_iter+0x233/0x740 fs/udf/file.c:115
 call_write_iter include/linux/fs.h:1851 [inline]
 new_sync_write fs/read_write.c:491 [inline]
 vfs_write+0x9ed/0xe10 fs/read_write.c:584
 ksys_write+0x12b/0x250 fs/read_write.c:637
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f799b28c0f9
RSP: 002b:00007f799bfbb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 00007f799b3ac050 RCX: 00007f799b28c0f9
RDX: 000000000208e24b RSI: 00000000200002c0 RDI: 0000000000000005
RBP: 00007f799b2e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff5bbd56df R14: 00007f799bfbb300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.5:13050 blocked for more than 148 seconds.
      Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:28464 pid:13050 ppid:5093   flags:0x00000004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5304 [inline]
 __schedule+0xcce/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:6757
 rwsem_down_write_slowpath+0x3e2/0x1220 kernel/locking/rwsem.c:1178
 __down_write_common kernel/locking/rwsem.c:1306 [inline]
 __down_write kernel/locking/rwsem.c:1315 [inline]
 down_write+0x1d2/0x200 kernel/locking/rwsem.c:1574
 inode_lock include/linux/fs.h:758 [inline]
 do_truncate+0x131/0x200 fs/open.c:64
 do_sys_ftruncate+0x53a/0x770 fs/open.c:194
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f799b28c0f9
RSP: 002b:00007f799bf9a168 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007f799b3ac120 RCX: 00007f799b28c0f9
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 00007f799b2e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff5bbd56df R14: 00007f799bf9a300 R15: 0000000000022000
 </TASK>
INFO: task syz-executor.5:13051 blocked for more than 148 seconds.
      Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-executor.5  state:D stack:27888 pid:13051 ppid:5093   flags:0x00004004
Call Trace:
 <TASK>
 context_switch kernel/sched/core.c:5304 [inline]
 __schedule+0xcce/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 io_schedule+0xbe/0x130 kernel/sched/core.c:8884
 folio_wait_bit_common+0x394/0x9b0 mm/filemap.c:1301
 folio_wait_writeback+0x47/0x3b0 mm/page-writeback.c:3127
 migrate_folio_unmap mm/migrate.c:1192 [inline]
 migrate_pages_batch+0x1281/0x3660 mm/migrate.c:1685
 migrate_pages+0x1b73/0x2300 mm/migrate.c:1973
 do_mbind mm/mempolicy.c:1338 [inline]
 kernel_mbind+0x4df/0x7c0 mm/mempolicy.c:1485
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f799b28c0f9
RSP: 002b:00007f799bf79168 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
RAX: ffffffffffffffda RBX: 00007f799b3ac1f0 RCX: 00007f799b28c0f9
RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000
RBP: 00007f799b2e7ae9 R08: 0000000000000000 R09: 0000000000000002
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff5bbd56df R14: 00007f799bf79300 R15: 0000000000022000
 </TASK>

Showing all locks held in the system:
3 locks held by kworker/u4:1/10:
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888144f9c138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x86d/0x1820 kernel/workqueue.c:2361
 #1: ffffc9000030fda8 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365
 #2: ffff888021e1e0e0 (&type->s_umount_key#64){++++}-{3:3}, at: trylock_super+0x21/0x110 fs/super.c:414
1 lock held by rcu_tasks_kthre/11:
 #0: ffffffff8c792830 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510
1 lock held by rcu_tasks_trace/12:
 #0: ffffffff8c792530 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 kernel/rcu/tasks.h:510
1 lock held by khungtaskd/27:
 #0: ffffffff8c793380 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 kernel/locking/lockdep.c:6495
2 locks held by getty/4754:
 #0: ffff888021a16098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 drivers/tty/tty_ldisc.c:244
 #1: ffffc900020382f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 drivers/tty/n_tty.c:2177
3 locks held by kworker/1:9/5651:
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888012469d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x86d/0x1820 kernel/workqueue.c:2361
 #1: ffffc90004797da8 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365
 #2: ffffffff8c79e540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3945
2 locks held by kworker/1:30/6842:
3 locks held by kworker/u4:19/7769:
3 locks held by kworker/u4:20/7774:
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic64_set arch/x86/include/asm/atomic64_64.h:34 [inline]
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: arch_atomic_long_set include/linux/atomic/atomic-long.h:41 [inline]
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: atomic_long_set include/linux/atomic/atomic-instrumented.h:1280 [inline]
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_data kernel/workqueue.c:639 [inline]
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: set_work_pool_and_clear_pending kernel/workqueue.c:666 [inline]
 #0: ffff888140059938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x86d/0x1820 kernel/workqueue.c:2361
 #1: ffffc900055afda8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1820 kernel/workqueue.c:2365
 #2: ffffffff8c79e540 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6d0 kernel/rcu/tree.c:3945
1 lock held by syz-executor.5/13033:
 #0: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #0: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1230 arch/x86/mm/fault.c:1358
2 locks held by syz-executor.5/13035:
 #0: ffff88801e3b9de8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
 #1: ffff888021e1e460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 fs/read_write.c:637
4 locks held by syz-executor.5/13047:
 #0: ffff88807e0de3e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
 #1: ffff888021e1e460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 fs/read_write.c:637
 #2: ffff8880575a1368 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #2: ffff8880575a1368 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: udf_file_write_iter+0x6d/0x740 fs/udf/file.c:99
 #3: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock include/linux/mmap_lock.h:117 [inline]
 #3: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1230 arch/x86/mm/fault.c:1358
2 locks held by syz-executor.5/13050:
 #0: ffff888021e1e460 (sb_writers#14){.+.+}-{0:0}, at: do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 #0: ffff888021e1e460 (sb_writers#14){.+.+}-{0:0}, at: do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 #1: ffff8880575a1368 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #1: ffff8880575a1368 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x131/0x200 fs/open.c:64
1 lock held by syz-executor.5/13051:
 #0: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_write_lock include/linux/mmap_lock.h:71 [inline]
 #0: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: do_mbind mm/mempolicy.c:1312 [inline]
 #0: ffff88807583ab18 (&mm->mmap_lock){++++}-{3:3}, at: kernel_mbind+0x318/0x7c0 mm/mempolicy.c:1485
3 locks held by kworker/0:15/13736:
2 locks held by syz-executor.2/14059:
 #0: ffff88803982a410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: inode_lock include/linux/fs.h:758 [inline]
 #0: ffff88803982a410 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x290 net/socket.c:650
 #1: ffffffff8c79e678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline]
 #1: ffffffff8c79e678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e8/0x770 kernel/rcu/tree_exp.h:989
1 lock held by syz-executor.4/14065:
 #0: ffffffff8c7fea28 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0x81/0xf0 kernel/tracepoint.c:478
7 locks held by syz-executor.1/14080:
 #0: ffff8880228e7168 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 fs/file.c:1046
 #1: ffff888027d3e460 (sb_writers#11){.+.+}-{0:0}, at: do_writev+0x133/0x2f0 fs/read_write.c:977
 #2: ffff8880590b0088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 fs/kernfs/file.c:325
 #3: ffffffff8c7dab88 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0x138/0x520 kernel/cgroup/cgroup.c:1673
 #4: ffffffff8c63d930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2435 [inline]
 #4: ffffffff8c63d930 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x149/0x670 kernel/cgroup/cgroup.c:2939
 #5: ffffffff8c7da950 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_lock kernel/cgroup/cgroup.c:2437 [inline]
 #5: ffffffff8c7da950 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x155/0x670 kernel/cgroup/cgroup.c:2939
 #6: ffffffff8c79e678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock kernel/rcu/tree_exp.h:325 [inline]
 #6: ffffffff8c79e678 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e8/0x770 kernel/rcu/tree_exp.h:989
4 locks held by syz-executor.1/14082:
2 locks held by syz-executor.1/14084:

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106
 nmi_cpu_backtrace+0x316/0x3e0 lib/nmi_backtrace.c:113
 nmi_trigger_cpumask_backtrace+0x33f/0x460 lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:148 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:222 [inline]
 watchdog+0xe94/0x11e0 kernel/hung_task.c:379
 kthread+0x2e8/0x3a0 kernel/kthread.c:376
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:308
 </TASK>
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 14081 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12485-gf3a2439f20d9 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023
RIP: 0010:raw_spin_rq_unlock+0xe/0x80 kernel/sched/core.c:583
Code: 00 eb 8e 48 8b 7c 24 08 e8 bf 76 7c 00 eb c1 48 8b 7c 24 08 e8 b3 76 7c 00 eb a1 90 66 0f 1f 00 53 48 89 fb 66 90 48 89 df 5b <e9> 2d 1c c2 08 48 8d bf 58 0d 00 00 48 b8 00 00 00 00 00 fc ff df
RSP: 0018:ffffc90003def4a0 EFLAGS: 00000046
RAX: 0000000000000001 RBX: ffff8880b993d018 RCX: 0000000000000001
RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff8880b993c2c0
RBP: ffffc90003def4f0 R08: ffff8880b993cd90 R09: ffffffff81584340
R10: fffffbfff229a970 R11: 0000000000000000 R12: ffff8880b993c2c0
R13: ffff888045bc8240 R14: 0000000000000000 R15: ffff8880b993ccf8
FS:  00007f18662a6700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00000000203a3000 CR3: 000000002a383000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 raw_spin_rq_unlock_irq kernel/sched/sched.h:1377 [inline]
 finish_lock_switch kernel/sched/core.c:5062 [inline]
 finish_task_switch.isra.0+0x2b0/0xc80 kernel/sched/core.c:5181
 context_switch kernel/sched/core.c:5307 [inline]
 __schedule+0xcd6/0x5b20 kernel/sched/core.c:6622
 schedule+0xde/0x1a0 kernel/sched/core.c:6698
 schedule_timeout+0x276/0x2b0 kernel/time/timer.c:2143
 unix_wait_for_peer+0x244/0x280 net/unix/af_unix.c:1450
 unix_dgram_sendmsg+0x1943/0x1c30 net/unix/af_unix.c:2048
 sock_sendmsg_nosec net/socket.c:722 [inline]
 sock_sendmsg+0xde/0x190 net/socket.c:745
 ____sys_sendmsg+0x334/0x900 net/socket.c:2504
 ___sys_sendmsg+0x110/0x1b0 net/socket.c:2558
 __sys_sendmmsg+0x18f/0x460 net/socket.c:2644
 __do_sys_sendmmsg net/socket.c:2673 [inline]
 __se_sys_sendmmsg net/socket.c:2670 [inline]
 __x64_sys_sendmmsg+0x9d/0x100 net/socket.c:2670
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x39/0xb0 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7f186548c0f9
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f18662a6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
RAX: ffffffffffffffda RBX: 00007f18655ac050 RCX: 00007f186548c0f9
RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006
RBP: 00007f18654e7ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007ffe9269220f R14: 00007f18662a6300 R15: 0000000000022000
 </TASK>